HackingProfessional ServicesProfessional ServicesCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Moore & Van Allen PLLC
bd_a335ba5b892aed33 · schema v1 · pii pii-v1
Full breach record for Moore & Van Allen PLLC →Moore & Van Allen PLLC (law firm, Charlotte NC) experienced an external system breach on August 15, 2025, during which an unauthorized actor accessed company systems for approximately twenty minutes and acquired copies of certain files. The breach was discovered on September 3, 2025. Four Maine residents had their name and Social Security number exposed. Notifications were sent October 3, 2025. Complimentary one-year Experian IdentityWorks services were offered to affected individuals.
Maine clockDiscovered Sep 3, 2025 → Filed with AG Oct 3, 202530d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_3a53d29015462646Leak Sitesilentransomgroupfiled 2025-09-03(29d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_4032fbc8df8a587eVermont State AGfiled 2025-10-03Verified
- bd_bcbd1af7f81ee657Indiana State AGfiled 2025-10-03Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/57e9a813-c3a0-4e3e-aec4-03f9848bd51a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2025
- Raw hash
- d05bd813fac527dc7d09456ab6403cd57ec10c91a1fa2b0b6cdecd07f4d9204c
Reporting entity
- Name
- Moore & Van Allen PLLCnorm: moore van allen
- Domain
- mvalaw.com
- Industry
- Legal Services
Victim entity
- Name
- Moore & Van Allen PLLCnorm: moore van allen
- Domain
- mvalaw.com
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Sep 3, 2025
- Materiality determined
- —
- Notification sent
- Oct 3, 2025
- Affected individuals
- 4
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Maine Attorney General notification per Me. Rev. Stat. Tit. 10, §1348
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 3, 2025→ Filed with AG: Oct 3, 202530d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.